CVE-2024-29858

In MISP versions prior to 2.4.187 , a weak security check in the __uploadLogo function within app/Controller/OrganisationsController.php fails to properly validate logo uploads. This vulnerability allows a malicious actor to bypass security measures during the upload process. To remediate this is...

CVE-2024-29858

In MISP before 2.4.187, uploadLogo in app/Controller/OrganisationsController.php does not properly check for a valid logo upload...